Loading…
Last updated: October 8, 2026
This is the privacy policy for the TaskBullet application at taskbullet.com. It explains how TaskBullet collects, uses, stores, shares, protects, and deletes personal information, including Google user data, when you use the TaskBullet website, account, and virtual assistant services.
Google user data, in short. If you sign in with Google, TaskBullet accesses your Google account name, email address, and profile picture to create and identify your TaskBullet account. If you connect Google Workspace, TaskBullet also accesses permission to send email you approve, calendar events you ask us to schedule, and the email address of the connected account. TaskBullet does not request access to read your Gmail inbox. TaskBullet uses that Google user data only to provide those features. TaskBullet does not use Google user data for advertising, does not sell it, does not use it to determine creditworthiness, and does not use it to develop, improve, or train generalized or non-personalized artificial-intelligence or machine-learning models. TaskBullet shares Google user data only with processors that host the service or generate the assistant reply you requested, with your assigned assistant when you ask a person to do that work, and when the law requires it. TaskBullet protects Google user data with TLS in transit and AES-256-GCM encryption of OAuth tokens at rest. Disconnecting Google in TaskBullet settings deletes those tokens from our systems. You may request deletion of your data by emailing support@taskbullet.net. Section 8 states each of these points in full.
When you use TaskBullet's website or services, we may collect:
If you opt in to TaskBullet SMS (the "TaskBullet SMS Program"), we use your mobile number only to send customer-care and operational messages about your TaskBullet account — for example task or delivery updates, scheduling and appointment reminders, support replies, and similar service notifications. This is not a third-party marketing list or lead-generation blast program.
Program terms also appear in our Terms of Service (SMS Communications).
We do not sell your personal information. We share data only with:
Except as described above, we do not share personal information — including mobile numbers collected for the TaskBullet SMS Program — with third parties for those parties' marketing.
We use TLS in transit, access controls (per-client Basecamp projects; staff access limited to assigned assistants and account managers), and hosting on Vercel with PostgreSQL (Neon). OAuth tokens we store (Google Workspace, Basecamp) are encrypted at rest with AES-256-GCM in production. Payment card numbers are processed by Stripe and are not stored on TaskBullet servers. Client passwords for third-party tools should be shared only through a password manager (for example 1Password), never by email or Basecamp.
You may request access to, correction of, or deletion of your personal data at any time by emailing support@taskbullet.net. We aim to complete verified deletion requests within 30 days for data we control (account, billing metadata, dashboard conversations). Copies in backups, Basecamp, email, and subprocessors are removed on those systems' own cycles. We keep billing records as required for tax and accounting.
Account data is retained while the account is active. After the last hour expires or you ask us to close the account, we retain operational records only as needed for billing, dispute handling, and legal obligation, then delete or anonymize the rest.
We use essential cookies and analytics cookies (Google Analytics, Bing UET) to understand site usage. You can disable cookies in your browser settings.
This section describes how the TaskBullet application accesses, uses, stores, shares, protects, retains, and deletes Google user data. TaskBullet requests Google user data only when you choose Google sign-in or connect Google Workspace from your TaskBullet settings.
When you sign in with Google, TaskBullet accesses:
openid, userinfo.email, userinfo.profile), to create and identify your TaskBullet account.When you connect Google Workspace, TaskBullet additionally accesses:
gmail.send) — to send emails that you have drafted and explicitly approved in TaskBullet.https://www.googleapis.com/auth/calendar) — to create, update, and read calendar events you ask the assistant to schedule.userinfo.email) — to identify the connected Google account and display it in your settings.TaskBullet does not currently request Gmail inbox access, including gmail.readonly. Inbox reading may return in a future release only after additional Google verification. This policy will describe that access before it is requested.
TaskBullet uses Google user data only to provide the user-facing features you request: signing you in, showing which Google account is connected, sending email you approved, and creating or reading calendar events you asked for.
TaskBullet does not use Google user data for advertising, retargeting, or interest-based ads. TaskBullet does not sell Google user data to data brokers or information resellers. TaskBullet does not use Google user data to determine creditworthiness or for lending. TaskBullet does not use Google user data to develop, improve, or train generalized or non-personalized artificial-intelligence or machine-learning models.
TaskBullet does not sell Google user data. TaskBullet does not transfer or disclose Google user data to third parties for advertising, resale, credit decisions, or training generalized AI or machine-learning models.
TaskBullet shares Google user data only as needed to provide the feature you requested:
Google Analytics and Google Ads measurement on the TaskBullet marketing site are separate from Google user data received through OAuth. Those site tools do not receive your Gmail contents, Calendar events, or Google OAuth tokens.
TaskBullet protects Google user data with TLS in transit, access controls limited to your account and to staff assigned to that account, and AES-256-GCM encryption of Google OAuth access and refresh tokens at rest. Payment card numbers are processed by Stripe and are not stored on TaskBullet servers.
TaskBullet stores the connected Google email address and encrypted OAuth tokens while the connection is active, and uses them only to keep that connection working. Disconnecting Google in TaskBullet settings deletes those tokens from our systems immediately. You can also remove TaskBullet's access in your Google Account security settings.
Calendar details and email text you asked the assistant to draft that the assistant used to answer you are kept in your TaskBullet conversation history while the account is active. When you close the account, or when we complete a verified deletion request, we delete or anonymize that data for records we control. Email support@taskbullet.net to request access, correction, or deletion. We aim to complete verified deletion requests within 30 days for data we control. Copies in backups age out on the backup cycle. A copy already sent to xAI remains only for xAI's audit retention, then is deleted there.
TaskBullet's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
We use these processors to run the service. A change that adds a processor handling personal data will be reflected here.
Hiring of virtual assistants uses Orca for applicant flow. QuickBooks Online is used for TaskBullet bookkeeping, not as a consumer-facing processor of your customers' data unless you ask a VA to work in your own QuickBooks.
We may update this policy from time to time. Changes will be posted on this page with an updated date.
Questions? Email us at support@taskbullet.net or call 888-827-1080.